Apache dolphinscheduler
This hub aggregates every CVE we track for Apache dolphinscheduler, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
33
CVEs tracked
7
Critical
16
High
0
In CISA KEV
Severity distribution
HIGH16MEDIUM10CRITICAL7
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
2
0
0
0
0
0
0
3
0
5
0
1
1
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Apache dolphinscheduler.
- CVE-2026-57590Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations8.1
- CVE-2026-49050Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens8.8
- CVE-2026-47340Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.6.5
- CVE-2026-32967Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks9.1
- CVE-2026-42357Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.6.5
- CVE-2026-41280Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects4.9
- CVE-2026-32966Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure9.8
- CVE-2026-23902Apache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.8.1
- CVE-2025-62233Apache DolphinScheduler: Deserialization of untrusted data in RPC6.3
- CVE-2025-62188Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.7.5
- CVE-2024-43166Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes th...9.8
- CVE-2024-43115Apache DolphinScheduler: Alert Script Attack8.8
- CVE-2024-43202Apache DolphinScheduler: Remote Code Execution Vulnerability9.8
- CVE-2024-30188Apache DolphinScheduler: Resource File Read And Write Vulnerability8.1
- CVE-2024-29831Apache DolphinScheduler: RCE by arbitrary js execution8.8
Product normalization is registry-driven with AI assist and human review. How it works